<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Alert on single analytics data in Splunk AppDynamics</title>
    <link>https://community.splunk.com/t5/Splunk-AppDynamics/Alert-on-single-analytics-data/m-p/729336#M6630</link>
    <description>&lt;P&gt;Hi Yann,&lt;/P&gt;&lt;P&gt;You can use ADQL in order to create your own metric like this below in screenshot &lt;SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="analytics query metrics.jpg" style="width: 999px;"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="image.jpeg"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/35730i46F3BAF0D55A553B/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.jpeg" alt="image.jpeg" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;In your example, you can easily count your&amp;nbsp;&amp;nbsp;"status" field with "Failed" message . Based on this count you create alert or something like that.&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;Cansel&lt;/P&gt;</description>
    <pubDate>Sat, 11 Nov 2023 13:37:47 GMT</pubDate>
    <dc:creator>Cansel_OZCAN</dc:creator>
    <dc:date>2023-11-11T13:37:47Z</dc:date>
    <item>
      <title>Alert on single analytics data</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Alert-on-single-analytics-data/m-p/729335#M6629</link>
      <description>&lt;P&gt;Good morning community,&lt;/P&gt;&lt;P&gt;I'm currently ingesting a volume of data inside an analytics schema.&lt;BR /&gt;I'm interest in specific dynamic when some of the results are in failed status:&lt;/P&gt;&lt;P&gt;&lt;SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="YannBuccellato_1-1699433966294.png" style="width: 999px;"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="image.png"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/35731i45218E1264974084/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Is it possible to alert from AppDynamics when single results are failing and transform the problem into a payload?&lt;BR /&gt;For an example : when I do have one row with status failed, generate an alert with the following message:&lt;BR /&gt;&lt;BR /&gt;The message &amp;lt;take the value from the analytics MessageGuID&amp;gt; has status &amp;lt;take the value from the analytics&amp;nbsp; Status&amp;gt; with Exception &amp;lt; value from the analytics Exception&amp;gt;&lt;BR /&gt;&lt;BR /&gt;Thank for any feedback and experience shared,&lt;/P&gt;&lt;P&gt;regards&lt;/P&gt;</description>
      <pubDate>Wed, 08 Nov 2023 09:05:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Alert-on-single-analytics-data/m-p/729335#M6629</guid>
      <dc:creator>Yann_Buccellato</dc:creator>
      <dc:date>2023-11-08T09:05:27Z</dc:date>
    </item>
    <item>
      <title>Re: Alert on single analytics data</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Alert-on-single-analytics-data/m-p/729336#M6630</link>
      <description>&lt;P&gt;Hi Yann,&lt;/P&gt;&lt;P&gt;You can use ADQL in order to create your own metric like this below in screenshot &lt;SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="analytics query metrics.jpg" style="width: 999px;"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="image.jpeg"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/35730i46F3BAF0D55A553B/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.jpeg" alt="image.jpeg" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;In your example, you can easily count your&amp;nbsp;&amp;nbsp;"status" field with "Failed" message . Based on this count you create alert or something like that.&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;Cansel&lt;/P&gt;</description>
      <pubDate>Sat, 11 Nov 2023 13:37:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Alert-on-single-analytics-data/m-p/729336#M6630</guid>
      <dc:creator>Cansel_OZCAN</dc:creator>
      <dc:date>2023-11-11T13:37:47Z</dc:date>
    </item>
    <item>
      <title>Re: Alert on single analytics data</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Alert-on-single-analytics-data/m-p/729337#M6631</link>
      <description>&lt;P&gt;Thank you for your reply Cansel,&lt;/P&gt;&lt;P&gt;it's already clear to me that with ADQL I can create single values &amp;gt; metrics and based on that Alerting.&lt;/P&gt;&lt;P&gt;I'm now more interested for example to understand if I can have an alert on a single record; for example an alert generated based on the fact that MessaegGuid has "Failed" Status. Is it possible, by your experience, to obtain this once I have the data in the analytics engine?&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;</description>
      <pubDate>Mon, 13 Nov 2023 13:50:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Alert-on-single-analytics-data/m-p/729337#M6631</guid>
      <dc:creator>Yann_Buccellato</dc:creator>
      <dc:date>2023-11-13T13:50:37Z</dc:date>
    </item>
  </channel>
</rss>

